Allowing anonimous API calls for login/register

agoravoting · Sep 2, 2014 · 6303c52 · 6303c52
1 parent 6dd9aa4
commit 6303c52
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 6 deletions.
diff --git a/agora_site/agora_core/resources/user.py b/agora_site/agora_core/resources/user.py
@@ -175,11 +175,11 @@ def prepend_urls(self):
             url(r"^(?P<resource_name>%s)/register%s$" \
                 % (self._meta.resource_name, trailing_slash()),
                 self.wrap_form(form_class=APISignupForm,
-                method="POST"), name="api_user_register"),
+                method="POST", anon=True), name="api_user_register"),
 
             url(r"^(?P<resource_name>%s)/login%s$" % (self._meta.resource_name,
                 trailing_slash()), self.wrap_form(
-                form_class=LoginForm, method="POST"),
+                form_class=LoginForm, method="POST", anon=True),
                 name="api_username_login"),
 
             url(r"^(?P<resource_name>%s)/logout%s$" % (self._meta.resource_name,

diff --git a/agora_site/misc/generic_resource.py b/agora_site/misc/generic_resource.py
@@ -51,7 +51,7 @@ def raise_error(self, request, http_method, data):
         return http_method(serialized,
             content_type=build_content_type(desired_format))
 
-    def wrap_form(self, form_class, method="POST", raw=False):
+    def wrap_form(self, form_class, method="POST", raw=False, anon=False):
         """
         Creates a view for a given form class, which calls to is_valid()
         and save() when needed. You can get the form args reimplementing
@@ -60,7 +60,8 @@ def wrap_form(self, form_class, method="POST", raw=False):
         """
         @csrf_exempt
         def wrapper(request, *args, **kwargs):
-            self.is_authenticated(request)
+            if not anon:
+                self.is_authenticated(request)
             try:
                 desired_format = self.determine_format(request)
                 if method == "POST" or method== "PUT":
@@ -193,7 +194,7 @@ def api_field_from_django_field(cls, f, default=fields.CharField):
 # we can make sure its GenericResourceMixin.api_field_from_django_field is
 # used
 class GenericResource(GenericResourceMixin, ModelResource):
-    def wrap_view(self, view):
+    def wrap_view(self, view, anon=False):
         """
         Adds the authentication call to every view
         """
@@ -204,7 +205,9 @@ def wrap(request, *args, **kwargs):
             return wrap
 
         wrapper = super(GenericResource, self).wrap_view(view)
-        wrapper = authenticated(wrapper)
+
+        if not anon:
+            wrapper = authenticated(wrapper)
 
         return wrapper